Page 1 of 1

secure telnet(and FTP) ciphers

Posted: Sat Feb 06, 2016 1:01 am
by markjf
Hi,
One of my customers has both secure (encrypted) FTP and secure telnet, the ciphers that they have specified are :
SSL_AES_256_SHA
SSL_AES_128_SHA
SSL_3DES_SHA
SSL_RC4_SHA
SSL_RC4_MD5
.. which is sort of in line with the TCP/IP ref but that shows them as :
SSL_RC4_SHA 4S 05
SSL_RC4_MD5 4M 04
SSL_AES_256_SHA A2 35
SSL_AES_128_SHA A1 2F
SSL_3DES_SHA 3S 0A

I would have though (from many web searches) that they should be TLS_ ciphers ..

In any case I've tried to find out what the 2 character codes at the end mean, and if they're required, and id so, for what (obviously they are working without, on these systems).

One person suggested that I should use _SHA2 instead of _SHA1, but, as you can see from above it's simply _SHA

Any insight, and/or direction to specific doc would be greatly appreciated .

Thanks,
Mark

Re: secure telnet(and FTP) ciphers

Posted: Sat Feb 06, 2016 1:31 am
by enrico-sorichetti
IIRC, TLS(Transport Layer Security ) is the successor of SSL (Secure Sockets Layer )

I believe that in

SSL_AES_256_SHA
and
SSL_AES_256_SHA A2 35

the a2 and 35 are irrelevant

Re: secure telnet(and FTP) ciphers

Posted: Sat Feb 06, 2016 2:30 am
by Robert Sample
Look at the z/OS Communications Server bookshelf, and the IP Configuration Reference manual in particular.